Privacy Policy

Last updated 4 September 2026

1. About this policy

This Privacy Policy explains how Allurix (UEN 53478323J), a business registered in Singapore with its place of business at Blk 301 Serangoon Ave 2, #01-326, Singapore 550301 (“Allurix”, “we”, “us”, “our”), collects, uses, discloses and protects your personal data. It applies to our website at allurix.sg, the Allurix mobile app, and our salon and customer services.

We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”). By using our website or app, booking an appointment, or otherwise giving us your personal data, you acknowledge this policy.

2. Information we collect

Information you give us

• Account & profile: your name, gender, mobile number, email address, birthday (month and day), postal code, how you heard about us, and your marketing preference.
• Bookings & visits: the services you book, appointment dates and times, the technician you see, and notes relevant to your treatment (for example, a nail or skin condition or allergy you tell us about).
• Packages & purchases: prepaid packages, credit balances, and your transaction history with us.
• Communications: messages, enquiries and feedback you send us by app, email, phone, WhatsApp or social media.
• Content you choose to share: photos or reviews you submit.

Information from other sources

• Booking system: where you book through our third-party booking provider (Fresha), we receive your booking and contact details.
• Payment providers: confirmation of payments (we do not receive or store full card numbers).
• Social media: limited information when you interact with our pages or message us on those platforms.

3. How we use your information

We use your personal data to:

• create and manage your account, and verify your identity — to sign you in, we send a one-time passcode (OTP) by SMS to your mobile number through our SMS provider (Amazon Web Services);
• take and manage bookings, and provide salon and related services;
• administer prepaid packages, credits and loyalty benefits;
• respond to your enquiries and provide customer support;
• send you service messages (for example, appointment confirmations, reminders and changes);
• send you marketing about our promotions, offers and events, where you have opted in (see section 5);
• understand how our website and app are used, and improve them;
• keep our services, customers and staff safe, and prevent, detect and investigate fraud or misuse;
• comply with our legal, regulatory, accounting and tax obligations.

4. Our legal basis

We rely on your consent for most of our processing. For some purposes we may rely on “deemed consent” under the PDPA (for example, passing your booking details to a technician so your service can be carried out) or on exceptions permitted by the PDPA, such as processing reasonably necessary for security, fraud prevention, or our legitimate business interests, and processing required by law.

5. Marketing communications

We only send marketing messages if you have chosen to receive them. You can withdraw your consent at any time — by turning off “Offers & updates” in the app, using the unsubscribe option in a message, or emailing us at hello@allurix.sg. We will act on your request within a reasonable time. Even after you opt out, we will still send you non-promotional service messages about your bookings and account.

6. Who we share your information with

We do not sell your personal data. We share it only as described below:

• Service providers acting for us: cloud hosting and SMS delivery (Amazon Web Services); our booking provider (Fresha); website analytics (Google); payment processors; and IT and communications suppliers. They may only use the data to provide services to us.
• Professional advisers: such as our accountants or lawyers, where needed.
• Authorities and others: where we are required or permitted by law, to enforce our terms, or to protect the rights, safety or property of Allurix, our customers or the public.
• Business transfer: if our business or assets are reorganised, transferred or sold, your data may be transferred as part of that process.

7. Transfers outside Singapore

Some of our service providers (including Amazon Web Services and Google) may store or process your personal data on servers located outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it is given a standard of protection comparable to that under the PDPA.

8. How long we keep your information

We keep your personal data for as long as your account is active and for a reasonable period afterwards, and longer where we need to for legal, accounting or tax reasons (transaction records are generally kept for at least five years). When we no longer need your data, we securely delete or anonymise it.

9. How we protect your information

We use reasonable administrative, technical and physical safeguards, including access controls, encryption of data in transit, storing one-time passcodes only in hashed form, and limiting staff access to what they need. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to the PDPA, you may:

• Access the personal data we hold about you and ask how we have used it;
• Correct personal data that is inaccurate or incomplete;
• Withdraw consent to our collection, use or disclosure of your personal data, including for marketing.

To make a request, email hello@allurix.sg. We may need to verify your identity, and we may charge a reasonable fee for an access request as allowed by the PDPA. We aim to respond within 30 days; if we cannot, we will tell you when to expect a response. Withdrawing consent may mean we can no longer provide some services to you (for example, app sign-in relies on your mobile number).

11. Children

Our services are intended for adults. If you are under 18, please use them only with the involvement of a parent or guardian. We do not knowingly collect personal data from children under 13; if you believe a child has given us personal data, contact us and we will delete it.

12. Cookies and analytics

Our website uses cookies and similar technologies for essential functionality and to measure how the site is used, including Google Analytics. You can control or delete cookies through your browser settings; blocking some cookies may affect how the site works. The mobile app does not use advertising cookies.

13. Third-party links

Our website and app may link to third-party sites and services (for example, Fresha, WhatsApp, Google Maps and social media). We are not responsible for their content or privacy practices; please review their policies.

14. Changes to this policy

We may update this policy from time to time. The current version is always posted on this page with its last updated date. If we make a material change, we will take reasonable steps to notify you, such as through the app or by other means.

15. Contact us

Questions, requests or complaints about your personal data can be sent to:

Allurix
Blk 301 Serangoon Ave 2, #01-326, Singapore 550301
Email: hello@allurix.sg
Phone: 8020 3290

If we cannot resolve your concern, you may contact the Personal Data Protection Commission of Singapore at pdpc.gov.sg.